$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2f1faa-9dab-3585-9498-9cfc7568aaa0.roa File: 0c2f1faa-9dab-3585-9498-9cfc7568aaa0.roa (raw, json) Hash identifier: EpC7BAKSw2Dk94n7QTelb+h+NPxAagxjulVSBunyZAU= Subject key identifier: 53:74:1F:6D:00:FF:33:60:D4:B6:83:3E:B1:9A:A1:41:5F:90:7D:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C109C8E7330DA7A4AE75580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2f1faa-9dab-3585-9498-9cfc7568aaa0.roa Signing time: Wed 18 Jun 2025 18:02:44 +0000 ROA not before: Wed 18 Jun 2025 18:02:44 +0000 ROA not after: Tue 16 Sep 2025 18:02:44 +0000 asID: 22773 IP address blocks: 68.98.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:9c:8e:73:30:da:7a:4a:e7:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:44 2025 GMT Not After : Sep 16 18:02:44 2025 GMT Subject: CN=f27a73a9-90ba-45da-bc9f-9e954b09ff16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:fb:9f:b6:f5:31:a0:84:0e:66:b3:f0:07: 3f:1f:46:e7:eb:ec:44:1e:32:03:95:bb:52:da:8f: db:69:f9:ba:df:a1:f9:5a:c1:44:69:27:c2:d8:0c: 5b:70:9a:9c:0d:27:b0:a5:e0:ad:0b:85:35:1b:78: 88:3e:78:84:0a:49:bd:ea:58:5a:7a:f7:03:05:09: 0d:c7:b5:2a:76:b6:19:c0:61:e1:80:8e:95:47:8d: d4:9e:1c:a7:08:dc:9f:ea:bf:7b:07:61:8e:32:a4: 64:b1:ca:af:8d:51:06:98:56:3a:9f:19:ef:b9:a3: d6:61:97:d0:ab:83:8b:01:e9:5d:ad:6d:31:c8:bb: 41:33:d5:b3:53:2f:90:5e:d0:da:6e:d1:4e:2b:68: fa:db:03:9b:b3:1f:c6:d5:e6:b4:8b:cb:2e:f1:dc: c4:c0:33:1b:22:78:c4:63:6c:47:05:d0:3b:9f:e1: c7:26:39:1d:b5:ed:fe:10:e8:d7:a8:fc:33:f0:f0: 9d:47:0f:cb:4b:ab:e8:26:a3:aa:c5:3e:26:9f:d3: 16:0f:d2:de:1c:7a:16:0d:80:7c:08:6b:23:c8:51: 6f:46:4c:63:8f:f5:cf:35:0e:24:45:72:a5:dd:89: d9:9b:fe:70:cd:1e:74:90:0d:99:72:ab:7f:80:b4: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:1F:6D:00:FF:33:60:D4:B6:83:3E:B1:9A:A1:41:5F:90:7D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2f1faa-9dab-3585-9498-9cfc7568aaa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0c:13:8d:40:a4:2b:42:32:f6:4b:33:f1:99:6c:09:f3:05: 32:61:8d:ab:61:fe:02:2f:c7:58:fb:a9:9e:a6:d9:03:58:3a: 91:85:a3:02:ab:a4:e1:ca:01:29:73:cc:46:e2:d8:d8:5a:7d: f4:3e:ba:be:55:77:91:47:49:69:88:45:74:a3:6f:e6:d4:35: c5:66:83:a1:f5:a0:5d:f2:ba:7e:fd:e2:b7:91:30:cb:40:af: be:62:91:46:c3:fd:a6:81:c2:d9:5b:3a:4e:76:ad:06:4f:cf: d4:cd:4a:cc:a6:0d:fb:b3:fb:ee:69:22:e7:67:f9:e8:5c:22: 31:c4:00:19:ee:e3:66:43:d0:94:cb:33:d1:49:ff:18:66:9b: 17:ae:d2:45:ae:22:b9:60:b2:19:5d:ff:eb:5a:61:c0:ee:16: 5c:0a:59:90:b9:0f:4a:6c:7d:e4:4a:22:88:6e:f4:57:ec:2b: 67:61:64:50:93:0e:88:b6:4f:4a:ec:bf:11:88:3d:25:6d:1d: 0d:60:40:c7:62:cc:8f:bf:c1:78:18:1b:e6:be:9a:c4:bf:43: 5d:ae:67:fa:26:06:8b:38:64:6c:73:00:b4:4b:99:b8:c8:93: de:22:d3:54:71:59:4c:3e:d9:c4:2e:71:84:dc:58:9a:37:85: aa:04:bf:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EJyOczDaekrnVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDI0NFoXDTI1MDkxNjE4MDI0NFowLzEtMCsGA1UEAxMk ZjI3YTczYTktOTBiYS00NWRhLWJjOWYtOWU5NTRiMDlmZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9j7n7b1MaCEDmaz8Ac/H0bn6+xEHjIDlbtS 2o/bafm636H5WsFEaSfC2AxbcJqcDSewpeCtC4U1G3iIPniECkm96lhaevcDBQkN x7UqdrYZwGHhgI6VR43UnhynCNyf6r97B2GOMqRkscqvjVEGmFY6nxnvuaPWYZfQ q4OLAeldrW0xyLtBM9WzUy+QXtDabtFOK2j62wObsx/G1ea0i8su8dzEwDMbInjE Y2xHBdA7n+HHJjkdte3+EOjXqPwz8PCdRw/LS6voJqOqxT4mn9MWD9LeHHoWDYB8 CGsjyFFvRkxjj/XPNQ4kRXKl3YnZm/5wzR50kA2Zcqt/gLSScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN0H20A/zNg1LaDPrGaoUFfkH2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGMyZjFmYWEtOWRhYi0z NTg1LTk0OTgtOWNmYzc1NjhhYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkME41ApCtCMvZLM/GZbAnzBTJhjath/gIvx1j7qZ6m2QNYOpGFowKr pOHKASlzzEbi2NhaffQ+ur5Vd5FHSWmIRXSjb+bUNcVmg6H1oF3yun794reRMMtA r75ikUbD/aaBwtlbOk52rQZPz9TNSsymDfuz++5pIudn+ehcIjHEABnu42ZD0JTL M9FJ/xhmmxeu0kWuIrlgshld/+taYcDuFlwKWZC5D0psfeRKIohu9FfsK2dhZFCT Doi2T0rsvxGIPSVtHQ1gQMdizI+/wXgYG+a+msS/Q12uZ/omBos4ZGxzALRLmbjI k94i01RxWUw+2cQucYTcWJo3haoEv6w= -----END CERTIFICATE-----Generated at Wed Jul 2 07:19:41 2025 by rpki-client